@openclaw/codex 2026.9.3 → 2026.9.5

package/assets/activity.svg

@@ -0,0 +1,30 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">
+<!--
+Adapted from OpenClaw ui/public/provider-icons/ProviderIcon-codex.svg.
+Source: https://github.com/steipete/CodexBar/blob/215efbd39ad58acb4b0cd637c407d63e6183bc8d/Sources/CodexBar/Resources/ProviderIcon-codex.svg
+
+MIT License
+Copyright (c) 2026 Peter Steinberger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+Names and marks remain the property of their respective owners.
+-->
+  <path fill="currentColor" stroke="none" d="M83.7733 42.8087C84.6678 40.1149 84.9771 37.2613 84.6807 34.4385C84.3843 31.6156 83.489 28.8885 82.0544 26.4394C77.6908 18.8436 68.9203 14.9365 60.3548 16.7725C57.9831 14.1344 54.9591 12.1668 51.5864 11.0673C48.2137 9.96772 44.611 9.77498 41.1402 10.5084C37.6694 11.2418 34.4527 12.8755 31.8132 15.2455C29.1736 17.6155 27.204 20.6383 26.1024 24.0103C23.3212 24.5806 20.6938 25.738 18.3958 27.405C16.0977 29.0721 14.1819 31.2104 12.7765 33.6772C8.36538 41.2609 9.3669 50.8267 15.2527 57.3327C14.3549 60.0251 14.0424 62.8782 14.3361 65.7012C14.6298 68.5241 15.523 71.2518 16.9558 73.7017C21.325 81.3002 30.1011 85.207 38.6712 83.3686C40.5554 85.4904 42.8707 87.1858 45.4623 88.3416C48.0539 89.4975 50.8622 90.0871 53.6999 90.0713C62.4793 90.079 70.2575 84.4114 72.9393 76.0515C75.7201 75.4802 78.347 74.3225 80.6449 72.6555C82.9427 70.9886 84.8587 68.8507 86.2649 66.3846C90.6227 58.8145 89.6172 49.3005 83.7733 42.8087ZM53.6999 84.8356C50.1955 84.8411 46.801 83.6129 44.1116 81.3661L44.5848 81.098L60.5123 71.9043C60.9087 71.6718 61.2379 71.3402 61.4674 70.942C61.6969 70.5439 61.8189 70.0929 61.8215 69.6333V47.1769L68.5553 51.072C68.6225 51.1063 68.6694 51.1707 68.6814 51.2456V69.854C68.6641 78.1208 61.9667 84.8183 53.6999 84.8356ZM21.4977 71.0843C19.7402 68.0497 19.1092 64.4925 19.7156 61.0386L20.1885 61.3225L36.1321 70.5165C36.5266 70.748 36.9757 70.87 37.4331 70.87C37.8905 70.87 38.3396 70.748 38.7341 70.5165L58.21 59.2883V67.0628C58.2081 67.1031 58.1973 67.1424 58.1782 67.1779C58.1591 67.2134 58.1322 67.2441 58.0996 67.2678L41.9671 76.5722C34.798 80.7022 25.6388 78.2463 21.4977 71.0843ZM17.3026 36.3898C19.0723 33.3357 21.8655 31.0062 25.1878 29.8138V48.7376C25.1818 49.1949 25.2986 49.6453 25.5261 50.042C25.7535 50.4387 26.0833 50.7671 26.4809 50.9928L45.8622 62.1739L39.1283 66.069C39.0919 66.0883 39.0513 66.0984 39.0101 66.0984C38.9689 66.0984 38.9283 66.0883 38.8919 66.069L22.7908 56.7809C15.6359 52.6337 13.1822 43.4816 17.3026 36.3112V36.3898ZM72.624 49.2426L53.1792 37.9512L59.8976 34.0718C59.9341 34.0524 59.9747 34.0423 60.016 34.0423C60.0573 34.0423 60.0979 34.0524 60.1344 34.0718L76.2355 43.3761C78.6973 44.7966 80.7043 46.8882 82.0221 49.4065C83.3398 51.9249 83.914 54.7661 83.6775 57.5985C83.4411 60.431 82.4038 63.1377 80.6867 65.4027C78.9696 67.6677 76.6436 69.3975 73.9803 70.3901V51.466C73.9663 51.0096 73.834 50.5647 73.5962 50.1749C73.3584 49.7851 73.0234 49.4638 72.624 49.2426ZM79.3261 39.1657L78.8529 38.8815L62.9411 29.6089C62.5442 29.376 62.0924 29.2532 61.6322 29.2532C61.172 29.2532 60.7202 29.376 60.3233 29.6089L40.8629 40.8374V33.0628C40.8587 33.0233 40.8654 32.9834 40.882 32.9473C40.8987 32.9113 40.9248 32.8803 40.9575 32.8579L57.0586 23.5692C59.5263 22.1476 62.3478 21.458 65.193 21.5811C68.0382 21.7042 70.7896 22.6348 73.1253 24.2642C75.461 25.8936 77.2845 28.1543 78.3825 30.782C79.4806 33.4097 79.8077 36.2957 79.3257 39.1025V39.1657H79.3261ZM37.1888 52.9484L30.455 49.069C30.4213 49.0487 30.3925 49.0212 30.3707 48.9884C30.3488 48.9557 30.3345 48.9186 30.3286 48.8797V30.3188C30.3323 27.4714 31.1466 24.6839 32.6761 22.2822C34.2057 19.8805 36.3874 17.9639 38.9661 16.7564C41.5448 15.549 44.4139 15.1005 47.2381 15.4636C50.0622 15.8267 52.7247 16.9862 54.9141 18.8067L54.4409 19.0748L38.5134 28.2686C38.117 28.5011 37.7879 28.8327 37.5584 29.2308C37.329 29.629 37.207 30.0799 37.2045 30.5395L37.1888 52.9487V52.9484ZM40.8472 45.0632L49.5209 40.0643L58.21 45.0635V55.0615L49.5523 60.0608L40.8632 55.0615L40.8472 45.0632Z" />
+</svg>

package/dist/.setup/account-usage-runtime-C2MOIvfq.mjs

@@ -0,0 +1,75 @@
+import { n as isCodexAppServerProxyLaunch } from "./launch-args-DnMak49W.mjs";
+import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-DOEGYRNs.mjs";
+import { n as readCodexAppServerUsage } from "./request-BioXJLYa.mjs";
+import "./config-CedDWjM-.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CeAhl_h4.mjs";
+import { a as resolveCodexAppServerAuthProfileStore } from "./auth-profile-WqZtZfXN.mjs";
+import { isDeepStrictEqual } from "node:util";
+import { listAgentIds, resolveAgentDir } from "openclaw/plugin-sdk/agent-scope-runtime";
+import { z } from "zod";
+import { ErrorCodes, errorShape } from "openclaw/plugin-sdk/gateway-runtime";
+//#region extensions/codex/src/account-usage-runtime.ts
+const paramsSchema = z.object({
+	agentId: z.string().min(1),
+	profileId: z.string().min(1)
+}).strict();
+async function handleCodexAccountUsage({ params, respond, context, signal, hasCurrentClientAuthority }) {
+	const parsed = paramsSchema.safeParse(params);
+	if (!parsed.success) {
+		respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "Expected agentId and profileId."));
+		return;
+	}
+	const { agentId, profileId } = parsed.data;
+	const config = context.getRuntimeConfig();
+	if (!listAgentIds(config).includes(agentId)) {
+		respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "Unknown agent."));
+		return;
+	}
+	try {
+		const agentDir = resolveAgentDir(config, agentId);
+		const readStore = () => resolveCodexAppServerAuthProfileStore({
+			agentDir,
+			authProfileId: profileId,
+			config
+		});
+		const store = structuredClone(readStore());
+		const credential = store.profiles[profileId];
+		if (!credential || credential.provider !== "openai" || credential.type === "api_key") {
+			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "Select a saved Codex subscription login."));
+			return;
+		}
+		const assertCurrent = () => {
+			if (signal?.aborted || hasCurrentClientAuthority?.() === false || context.getRuntimeConfig() !== config || !isDeepStrictEqual(readStore().profiles[profileId], store.profiles[profileId])) throw new Error("Account credentials changed. Refresh Models and try again.");
+		};
+		assertCurrent();
+		const { start } = resolveCodexAppServerRuntimeOptions({ pluginConfig: config.plugins?.entries?.codex?.config });
+		if (isCodexAppServerProxyLaunch(start.args)) throw new Error("Account usage is unavailable through a Codex proxy. Configure a direct app-server launch.");
+		const usage = await readCodexAppServerUsage({
+			agentDir,
+			config,
+			timeoutMs: 2e4,
+			preparedAuth: {
+				kind: "profile",
+				profileId,
+				store
+			},
+			authRequirement: "subscription",
+			assertCurrent,
+			startOptions: {
+				...start,
+				transport: "stdio",
+				homeScope: "agent"
+			}
+		});
+		assertCurrent();
+		const snapshot = buildCodexAppServerUsageSnapshot(usage.rateLimits, { accountDetails: true });
+		respond(true, {
+			updatedAt: Date.now(),
+			providers: [snapshot]
+		});
+	} catch (error) {
+		respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, error instanceof Error ? error.message : "Codex usage unavailable. Try refreshing the account."));
+	}
+}
+//#endregion
+export { handleCodexAccountUsage };

package/dist/{apply-B6el6hdO.js → .setup/apply-CJ0ZfmBG.mjs}

@@ -1,14 +1,14 @@
-import { m as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-utils-C57JiJrU.js";
-import { x as readCodexPluginConfig } from "./protocol-CAAcVIKF.js";
-import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-Kq6oerr6.js";
-import { r as buildCodexPluginAppCacheKey, s as defaultCodexAppInventoryCache } from "./plugin-app-cache-key-CdSQzWyX.js";
-import { i as requestCodexAppServerJson } from "./request-CGvGOpeR.js";
-import "./config-JDfTI4VI.js";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BWf6JLWG.js";
-import { i as resolveCodexAppServerAuthProfileIdForAgent } from "./auth-profile-CwzO4_RG.js";
-import { X as resolveCodexAppServerAuthAccountCacheKey, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, o as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-CVhez2Uo.js";
-import { t as ensureCodexPluginActivation } from "./plugin-activation-BQK-f5sV.js";
-import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as applyCodexAuthItems, readCodexPluginMigrationConfigEntry, t as resolveCodexMigrationTargets } from "./plan-BMJdMOEF.js";
+import { c as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-DUle8DLz.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-CcB9iPoq.mjs";
+import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-QirmgiCo.mjs";
+import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BOxKP7db.mjs";
+import { i as requestCodexAppServerJson } from "./request-BioXJLYa.mjs";
+import "./config-CedDWjM-.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CeAhl_h4.mjs";
+import { i as resolveCodexAppServerAuthProfileIdForAgent } from "./auth-profile-WqZtZfXN.mjs";
+import { X as resolveCodexAppServerAuthAccountCacheKey, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, o as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-BpTtuLQ5.mjs";
+import { t as ensureCodexPluginActivation } from "./plugin-activation-r8nq5Jzp.mjs";
+import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as applyCodexAuthItems, r as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as resolveCodexMigrationTargets } from "./plan-xD7WKYTM.mjs";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import path from "node:path";
@@ -53,7 +53,6 @@ function sanitizeAppsNeedingAuth(apps) {
 //#region extensions/codex/src/migration/apply.ts
 const CODEX_PLUGIN_AUTH_REQUIRED_REASON = "auth_required";
 const CODEX_PLUGIN_NOT_SELECTED_REASON = "not selected for migration";
-const CODEX_CONFIG_PATCH_MODE_RETURN = "return";
 const CODEX_PLUGIN_LOAD_WARNING = "Some Codex plugins could not be migrated. Run `openclaw migrate codex` after onboarding.";
 const TARGET_CODEX_MARKETPLACE_DISCOVERY_POLL_MS = 250;
 const TARGET_CODEX_MARKETPLACE_DISCOVERY_TIMEOUT_MS = 3e4;
@@ -66,7 +65,7 @@ var CodexPluginConfigConflictError = class extends Error {
 	}
 };
 function shouldReturnCodexPluginConfigPatch(ctx) {
-	return ctx.providerOptions?.configPatchMode === CODEX_CONFIG_PATCH_MODE_RETURN;
+	return resolveCodexConfigPatchMode(ctx) === "return";
 }
 function prepareTargetCodexAppServer(ctx) {
 	const appServer = resolveTargetCodexAppServer(ctx);

package/dist/.setup/async-questions-DdhOCwGi.mjs

@@ -0,0 +1,27 @@
+import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+//#region extensions/codex/src/app-server/async-questions.ts
+/** Keep unsupported question payloads on Codex's complete plain-text fallback. */
+function readCodexAsyncQuestions(value) {
+	if (!Array.isArray(value) || value.length === 0 || value.length > 12) return;
+	const questions = [];
+	for (const entry of value) {
+		const question = asOptionalRecord(entry);
+		if (!question || !isQuestionText(question.title, 4096)) return;
+		const options = question.options;
+		if (options === void 0 || options === null) {
+			questions.push({ title: question.title });
+			continue;
+		}
+		if (!Array.isArray(options) || options.length === 0 || options.length > 4 || !options.every((option) => isQuestionText(option, 256))) return;
+		questions.push({
+			title: question.title,
+			options: [...options]
+		});
+	}
+	return questions;
+}
+function isQuestionText(value, maxLength) {
+	return typeof value === "string" && value.length <= maxLength && value.trim().length > 0;
+}
+//#endregion
+export { readCodexAsyncQuestions as t };

package/dist/{attempt-client-cleanup-D6cR54TV.js → .setup/attempt-client-cleanup-BpYKdTA0.mjs}

@@ -1,211 +1,15 @@
-import { o as isJsonObject } from "./protocol-CAAcVIKF.js";
-import "./client-BEKu4yDx.js";
-import { m as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-Kq6oerr6.js";
-import { r as CodexAppServerRpcError } from "./session-catalog-provenance-DkJHo735.js";
-import { G as unsubscribeCodexAppServerLiveThread } from "./shared-client-CVhez2Uo.js";
-import { asFiniteNumber, normalizeOptionalString, normalizeOptionalString as normalizeOptionalString$1, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
-import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
+import { a as isCodexAppServerBrokenPipeError, d as isCodexAppServerRequestTimeoutError, l as isCodexAppServerOverloadError } from "./client-vXs2929Q.mjs";
+import { m as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-QirmgiCo.mjs";
+import { i as CodexAppServerRpcError } from "./timeout-DZF05XrR.mjs";
+import { h as unknownItemStatus } from "./event-projector-items-DyTQ_XqL.mjs";
+import { G as unsubscribeCodexAppServerLiveThread, rt as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-BpTtuLQ5.mjs";
+import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { AsyncResource } from "node:async_hooks";
-import { redactSensitiveText } from "openclaw/plugin-sdk/logging-core";
+import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
+import { AgentHarnessPreflightError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
-//#region extensions/codex/src/app-server/event-projector-values.ts
-const BIO_POLICY_SAFETY_ACCESS_BLOCK_PREFIX = "This content was flagged for possible biological risk.";
-/** Project only Codex's explicit refusal contracts; other policy errors retain their own paths. */
-function readCodexProviderRefusal(message, codexErrorInfo) {
-	if (!message) return;
-	if (codexErrorInfo === "cyberPolicy") return {
-		category: "cyber",
-		message
-	};
-	if (codexErrorInfo === "misalignmentPolicyViolation") return {
-		category: "misalignment",
-		message
-	};
-	return message.startsWith(BIO_POLICY_SAFETY_ACCESS_BLOCK_PREFIX) ? {
-		category: "bio",
-		message
-	} : void 0;
-}
-function readNonEmptyString(record, key) {
-	return normalizeOptionalString$1(record[key]);
-}
-function readNonEmptyStringArray(record, key) {
-	const value = record[key];
-	if (!Array.isArray(value)) return [];
-	const entries = [];
-	for (const entry of value) {
-		const normalized = normalizeOptionalString$1(entry);
-		if (normalized) entries.push(normalized);
-	}
-	return entries;
-}
-function readNullableString(record, key) {
-	const value = record[key];
-	if (value === null) return null;
-	return typeof value === "string" ? value : void 0;
-}
-function readNonNegativeInteger(record, key) {
-	const value = asFiniteNumber(record[key]);
-	return value !== void 0 && Number.isInteger(value) && value >= 0 ? value : void 0;
-}
-function readCodexErrorNotificationMessage(record) {
-	const error = record.error;
-	return isJsonObject(error) ? readStringField(error, "message") : void 0;
-}
-function readHookOutputEntries(value) {
-	if (!Array.isArray(value)) return [];
-	return value.flatMap((entry) => {
-		if (!isJsonObject(entry)) return [];
-		const text = readStringField(entry, "text");
-		if (!text) return [];
-		const kind = readStringField(entry, "kind");
-		return [{
-			...kind ? { kind } : {},
-			text
-		}];
-	});
-}
-function splitPlanText(text) {
-	return text.split(/\r?\n/).map((line) => line.trim().replace(/^[-*]\s+/, "")).filter((line) => line.length > 0);
-}
-function extractRawAssistantText(item) {
-	const parts = (Array.isArray(item.content) ? item.content : []).flatMap((entry) => {
-		if (!isJsonObject(entry)) return [];
-		const type = readStringField(entry, "type");
-		if (type !== "output_text" && type !== "text") return [];
-		const value = readStringField(entry, "text");
-		return value === void 0 ? [] : [value];
-	});
-	return parts.length > 0 ? parts.join("").trim() : void 0;
-}
-function readItemString(item, key) {
-	const value = item[key];
-	return typeof value === "string" ? value : void 0;
-}
-function readItem(value) {
-	if (!isJsonObject(value)) return;
-	const type = typeof value.type === "string" ? value.type : void 0;
-	const id = typeof value.id === "string" ? value.id : void 0;
-	if (!type || !id) return;
-	return value;
-}
-//#endregion
-//#region extensions/codex/src/app-server/event-projector-items.ts
-function matchesCodexSnapshotTurn(item, turnId) {
-	const itemTurnId = readItemString(item, "turnId");
-	return itemTurnId === void 0 || itemTurnId === turnId;
-}
-function itemKind(item) {
-	switch (item.type) {
-		case "dynamicToolCall":
-		case "mcpToolCall": return "tool";
-		case "commandExecution": return "command";
-		case "fileChange": return "patch";
-		case "webSearch": return "search";
-		case "reasoning":
-		case "contextCompaction": return "analysis";
-		default: return;
-	}
-}
-function itemTitle(item) {
-	switch (item.type) {
-		case "commandExecution": return "Command";
-		case "fileChange": return "File change";
-		case "mcpToolCall": return "MCP tool";
-		case "dynamicToolCall": return "Tool";
-		case "webSearch": return "Web search";
-		case "contextCompaction": return "Context compaction";
-		case "reasoning": return "Reasoning";
-		default: return item.type;
-	}
-}
-function itemStatus(item) {
-	const status = readItemString(item, "status");
-	if (status === "failed" || status === "error") return "failed";
-	if (status === "declined") return "blocked";
-	if (status === "inProgress" || status === "in_progress" || status === "running") return "running";
-	return "completed";
-}
-function unknownItemStatus(item) {
-	const status = readItemString(item, "status");
-	switch (status) {
-		case void 0:
-		case "completed":
-		case "failed":
-		case "error":
-		case "declined":
-		case "inProgress":
-		case "in_progress":
-		case "running": return;
-		default: return status;
-	}
-}
-function auditNativeToolTerminalStatus(item) {
-	if (item.type === "imageView" || item.type === "sleep") return "completed";
-	const status = readItemString(item, "status");
-	if (status === "completed") return "completed";
-	if (status === "failed" || status === "error") return "failed";
-	if (status === "declined") return "blocked";
-	return "unknown";
-}
-function auditNativeToolUnfinishedStatus(item) {
-	return item.type === "webSearch" || item.type === "imageGeneration" ? "unknown" : "failed";
-}
-function isNonSuccessItemStatus(status) {
-	return status === "failed" || status === "blocked";
-}
-function itemName(item) {
-	if (item.type === "dynamicToolCall" && typeof item.tool === "string") return item.tool;
-	if (item.type === "mcpToolCall" && typeof item.tool === "string") {
-		const server = typeof item.server === "string" ? item.server : void 0;
-		return server ? `${server}.${item.tool}` : item.tool;
-	}
-	if (item.type === "commandExecution") return "bash";
-	if (item.type === "fileChange") return "apply_patch";
-	if (item.type === "webSearch") return "web_search";
-}
-function auditNativeToolName(item) {
-	if (item.type === "dynamicToolCall") return;
-	const progressName = itemName(item);
-	if (progressName) return progressName;
-	if (item.type === "collabAgentToolCall") return typeof item.tool === "string" && item.tool.trim() ? `collab.${item.tool.trim()}` : "collab_agent";
-	if (item.type === "imageGeneration") return "image_generation";
-	if (item.type === "imageView") return "image_view";
-	if (item.type === "sleep") return "sleep";
-}
-function isSideEffectingNativeToolItem(item) {
-	return itemStatus(item) !== "blocked" && (isMutatingNativeToolItem(item) || item.type === "mcpToolCall");
-}
-function shouldSynthesizeToolProgressForItem(item) {
-	switch (item.type) {
-		case "commandExecution":
-		case "fileChange":
-		case "webSearch":
-		case "mcpToolCall": return true;
-		default: return false;
-	}
-}
-function shouldRecordNativeToolTranscript(item) {
-	return shouldSynthesizeToolProgressForItem(item);
-}
-function isMutatingNativeToolItem(item) {
-	if (item.type === "commandExecution") return true;
-	return item.type === "fileChange" || item.type === "collabAgentToolCall" || item.type === "imageGeneration";
-}
-function shouldClearTerminalPresentationForNativeItem(item) {
-	switch (item.type) {
-		case "collabAgentToolCall":
-		case "commandExecution":
-		case "fileChange":
-		case "imageGeneration":
-		case "imageView":
-		case "mcpToolCall":
-		case "webSearch": return true;
-		default: return false;
-	}
-}
-//#endregion
+import { redactSensitiveText } from "openclaw/plugin-sdk/logging-core";
 //#region extensions/codex/src/app-server/notification-correlation.ts
 /**
 * Correlates Codex app-server notifications with the active thread/turn so
@@ -288,6 +92,9 @@ const DEFAULT_PREBIND_NOTIFICATION_LIMIT = 256;
 const DEFAULT_GLOBAL_WARNING_LIMIT = 32;
 const CODEX_APP_SERVER_NATIVE_TURN_WAIT_TIMEOUT_MS = 3e4;
 const routers = /* @__PURE__ */ new WeakMap();
+function hasCodexAppServerSiblingRouteWork(client, threadId) {
+	return routers.get(client)?.hasSiblingWork(threadId) ?? false;
+}
 /** Returns the sole router installed on a physical app-server client. */
 function getCodexAppServerTurnRouter(client) {
 	const existing = routers.get(client);
@@ -297,12 +104,17 @@ function getCodexAppServerTurnRouter(client) {
 	return router;
 }
 var ClientTurnRouter = class {
+	hasSiblingWork(threadId) {
+		for (const routedThreadId of this.routes.keys()) if (routedThreadId !== threadId) return true;
+		for (const watchedThreadId of this.nativeTurnCompletionWatchers.keys()) if (watchedThreadId !== threadId) return true;
+		return false;
+	}
 	constructor(client) {
 		this.routes = /* @__PURE__ */ new Map();
 		this.globalWarnings = [];
 		this.nativeTurnCompletionWatchers = /* @__PURE__ */ new Map();
 		client.addNotificationHandler((notification) => this.routeNotification(notification));
-		client.addRequestHandler((request, signal) => this.routeRequest(request, signal));
+		client.addRequestHandler((request, signal, setExecutionTimeoutMs) => this.routeRequest(request, signal, setExecutionTimeoutMs));
 		client.addCloseHandler((closedClient) => {
 			this.dispose(closedClient.getCloseError());
 		});
@@ -519,7 +331,7 @@ var ClientTurnRouter = class {
 		this.enqueueNotification(route, handler, notification, routeScope);
 		return route.notificationTail;
 	}
-	async routeRequest(request, signal = new AbortController().signal) {
+	async routeRequest(request, signal = new AbortController().signal, setExecutionTimeoutMs) {
 		if (this.closeError || signal.aborted) return;
 		const scope = readScope(request.params);
 		if (!scope.threadId) return;
@@ -542,7 +354,9 @@ var ClientTurnRouter = class {
 			const result = await handler(request, {
 				threadId: scope.threadId,
 				...scope.turnId ? { turnId: scope.turnId } : {}
-			}, requestSignal);
+			}, requestSignal, setExecutionTimeoutMs && ((timeoutMs) => {
+				if (!requestSignal.aborted) setExecutionTimeoutMs(timeoutMs);
+			}));
 			return requestSignal.aborted ? void 0 : result;
 		} catch (error) {
 			if (requestSignal.aborted) return;
@@ -764,7 +578,7 @@ async function interruptCodexTurnAndWaitBestEffort(client, params) {
 	}
 }
 /** Stops native terminals on the cancelled thread without retiring peer threads. */
-async function terminateCodexBackgroundTerminals(client, threadId, oneShotCliRun = false) {
+async function terminateCodexBackgroundTerminals(client, threadId, oneShotCliRun = false, waitForNativeItems) {
 	const options = {
 		timeoutMs: CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS,
 		signal: AbortSignal.timeout(CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS)
@@ -782,6 +596,7 @@ async function terminateCodexBackgroundTerminals(client, threadId, oneShotCliRun
 			}, options)).data.length > 0) throw new Error("native background terminals remain running");
 			if (oneShotCliRun) throw new Error("native terminal termination did not confirm process cleanup");
 		}
+		await waitForNativeItems?.(options.signal);
 	} catch (cause) {
 		throw new Error("Codex background-terminal cleanup failed; inspect the thread's running terminals before starting more work.", { cause });
 	}
@@ -800,5 +615,9 @@ async function unsubscribeCodexThreadBestEffort(client, params) {
 		return false;
 	}
 }
+function shouldRetireCodexStartupClient(error, spawnedBy, signal) {
+	if (signal.aborted || isCodexAppServerStartupError(error) || isCodexAppServerRequestTimeoutError(error)) return true;
+	return !isCodexAppServerStartSelectionChangedError(error) && !isCodexAppServerOverloadError(error) && !(error instanceof AgentHarnessPreflightError && error.scope === void 0) && (isCodexAppServerBrokenPipeError(error) || !spawnedBy);
+}
 //#endregion
-export { shouldRecordNativeToolTranscript as A, readNonEmptyStringArray as B, isSideEffectingNativeToolItem as C, itemTitle as D, itemStatus as E, readCodexProviderRefusal as F, readNullableString as H, readHookOutputEntries as I, readItem as L, extractRawAssistantText as M, normalizeOptionalString$1 as N, matchesCodexSnapshotTurn as O, readCodexErrorNotificationMessage as P, readItemString as R, isNonSuccessItemStatus as S, itemName as T, splitPlanText as U, readNonNegativeInteger as V, readCodexNotificationTurnId as _, closeCodexStartupClientBestEffort as a, auditNativeToolUnfinishedStatus as b, isCodexNoActiveTurnInterruptError as c, unsubscribeCodexThreadBestEffort as d, CODEX_APP_SERVER_NATIVE_TURN_WAIT_TIMEOUT_MS as f, readCodexNotificationThreadId as g, isCodexNotificationForTurn as h, assertCodexThreadResumeSubscription as i, shouldSynthesizeToolProgressForItem as j, shouldClearTerminalPresentationForNativeItem as k, retireUnsafeCodexTurnClientBestEffort as l, CodexProjectionDiagnostics as m, CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS as n, interruptCodexTurnAndWaitBestEffort as o, getCodexAppServerTurnRouter as p, CodexAppServerUnsafeSubscriptionError as r, isCodexAppServerUnsafeSubscriptionError as s, CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS as t, terminateCodexBackgroundTerminals as u, auditNativeToolName as v, itemKind as w, isMutatingNativeToolItem as x, auditNativeToolTerminalStatus as y, readNonEmptyString as z };
+export { CodexProjectionDiagnostics as _, closeCodexStartupClientBestEffort as a, readCodexNotificationTurnId as b, isCodexNoActiveTurnInterruptError as c, terminateCodexBackgroundTerminals as d, unsubscribeCodexThreadBestEffort as f, waitForPromiseOrAbort as g, hasCodexAppServerSiblingRouteWork as h, assertCodexThreadResumeSubscription as i, retireUnsafeCodexTurnClientBestEffort as l, getCodexAppServerTurnRouter as m, CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS as n, interruptCodexTurnAndWaitBestEffort as o, CODEX_APP_SERVER_NATIVE_TURN_WAIT_TIMEOUT_MS as p, CodexAppServerUnsafeSubscriptionError as r, isCodexAppServerUnsafeSubscriptionError as s, CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS as t, shouldRetireCodexStartupClient as u, isCodexNotificationForTurn as v, readCodexNotificationThreadId as y };

package/dist/{attempt-context-AO4DSjE0.js → .setup/attempt-context-VXVwTCfS.mjs}

@@ -1,6 +1,6 @@
-import { a as flattenCodexDynamicToolFunctions, o as isJsonObject } from "./protocol-CAAcVIKF.js";
-import { t as readCodexMirroredSessionHistoryMessages } from "./session-history-Cz-tOOYj.js";
-import { Z as areCodexDynamicToolFingerprintsCompatible, at as isMessageOnlyCodexSourceReply, dt as isContextEngineBindingCompatible } from "./thread-lifecycle-D1pzRwHB.js";
+import { m as isJsonObject, p as flattenCodexDynamicToolFunctions } from "./config-security-BRQ2mgW9.mjs";
+import { t as readCodexMirroredSessionHistoryMessages } from "./session-history-C--SrLI8.mjs";
+import { $ as areCodexDynamicToolFingerprintsCompatible, pt as isContextEngineBindingCompatible, st as isMessageOnlyCodexSourceReply } from "./thread-lifecycle-Cik28qWn.mjs";
 import { readNonBlankString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import path from "node:path";
@@ -32,8 +32,8 @@ const CODEX_BOOTSTRAP_CONTEXT_ORDER = /* @__PURE__ */ new Map([
 ]);
 /** Reads mirrored Codex session history for harness hooks. */
 async function readMirroredSessionHistoryMessages(params) {
-	const { admission, signal, ...target } = params;
-	const messages = await readCodexMirroredSessionHistoryMessages(target, admission, "model-context", signal);
+	const { admission, signal, contextTokenBudget, ...target } = params;
+	const messages = await readCodexMirroredSessionHistoryMessages(target, admission, "model-context", signal, contextTokenBudget);
 	if (!messages) embeddedAgentLog.warn("failed to read mirrored session history for codex harness hooks", { sessionFile: params.sessionFile });
 	return messages;
 }
@@ -442,7 +442,7 @@ function renderCodexWorkspaceBootstrapPromptContext(contextFiles) {
 	const files = contextFiles;
 	if (files.length === 0) return;
 	const lines = [
-		"OpenClaw loaded these user-editable workspace files for the current turn. Codex loads project-local AGENTS.md natively. When execution uses another folder, OpenClaw supplies the agent workspace AGENTS.md as thread-level developer instructions. SOUL.md, IDENTITY.md, and USER.md remain turn-scoped collaboration instructions. Those files are not repeated here.",
+		"OpenClaw loaded these user-editable workspace files for the current turn. Codex loads project-local AGENTS.md natively. When execution uses another folder, OpenClaw supplies the agent workspace AGENTS.md as thread-level developer instructions. SOUL.md, IDENTITY.md, and USER.md are prepared separately from user input and are not repeated here.",
 		"",
 		"# Project Context",
 		"",

package/dist/.setup/attempt-terminal-gZrxQ35N.mjs

@@ -0,0 +1,5 @@
+import { agentHarnessAttemptTerminal } from "openclaw/plugin-sdk/agent-harness-runtime";
+//#region extensions/codex/src/app-server/attempt-terminal.ts
+const attemptTerminal = agentHarnessAttemptTerminal;
+//#endregion
+export { attemptTerminal as t };

package/dist/{auth-binding-Co2Vfcf_.js → .setup/auth-binding-DhLWa_7K.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
 import { resolveApiKeyForProfile } from "openclaw/plugin-sdk/agent-runtime";
 import { fingerprintResolvedAuthProfileCredential } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveOpenAICodexAuthIdentity } from "openclaw/plugin-sdk/provider-auth";
@@ -74,4 +74,4 @@ async function fingerprintCodexAppServerAuthBinding(params) {
 	return (await prepareCodexAppServerAuthBinding(params))?.fingerprint;
 }
 //#endregion
-export { prepareCodexAppServerAuthBinding as n, auth_binding_exports as t };
+export { fingerprintCodexAppServerAuthBinding as n, prepareCodexAppServerAuthBinding as r, auth_binding_exports as t };

package/dist/{auth-cache-key-Kq6oerr6.js → .setup/auth-cache-key-QirmgiCo.mjs}

@@ -1,6 +1,6 @@
-import { n as defineCodexBuildState } from "./build-state-6RL6qohz.js";
-import { s as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-DrjjRRUD.js";
-import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-BGjHoYLr.js";
+import { n as defineCodexBuildState } from "./build-state-Xx9ybZqa.mjs";
+import { c as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-DP6Rib3P.mjs";
+import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-Cmx94Oiy.mjs";
 import { createHash } from "node:crypto";
 import fs, { constants, existsSync, watch } from "node:fs";
 import path from "node:path";

package/dist/{auth-profile-CwzO4_RG.js → .setup/auth-profile-WqZtZfXN.mjs}

@@ -1,4 +1,4 @@
-import { n as createCodexAuthProfileSelection } from "./auth-profile-selection-DFu9e167.js";
+import { n as createCodexAuthProfileSelection } from "./auth-profile-selection-DFu9e167.mjs";
 import { embeddedAgentLog, resolveDefaultAgentDir } from "openclaw/plugin-sdk/agent-harness-registration";
 import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
 import { ensureAuthProfileStore, resolveAuthProfileOrder } from "openclaw/plugin-sdk/provider-auth";

package/dist/.setup/binding-connection-Bm38niE8.mjs

@@ -0,0 +1,50 @@
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-registration";
+import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
+//#region extensions/codex/src/app-server/binding-connection.ts
+var binding_connection_exports = /* @__PURE__ */ __exportAll({
+	assertCodexSessionRuntimeOwnership: () => assertCodexSessionRuntimeOwnership,
+	codexBindingConnectionSelection: () => codexBindingConnectionSelection,
+	requireCodexSupervisionModelSelection: () => requireCodexSupervisionModelSelection,
+	resolveCodexBindingAppServerConnection: () => resolveCodexBindingAppServerConnection,
+	setCodexCatalogConnectionHomeResolver: () => setCodexCatalogConnectionHomeResolver
+});
+const catalogHomes = createPluginRuntimeStore({
+	key: "codex:catalog-home-resolver",
+	errorMessage: "Codex catalog homes are unavailable"
+});
+const setCodexCatalogConnectionHomeResolver = catalogHomes.setRuntime;
+/** Connection selection excludes independently updated thread bookkeeping. */
+function codexBindingConnectionSelection(binding) {
+	return binding ? [
+		binding.threadId,
+		binding.cwd.trim(),
+		binding.connectionScope,
+		binding.pendingSupervisionBranch?.connectionFingerprint ?? binding.appServerRuntimeFingerprint,
+		binding.authProfileId,
+		binding.preserveNativeModel === true
+	] : void 0;
+}
+/** Prevents a prepared native session from becoming a fresh thread after its binding changes. */
+function assertCodexSessionRuntimeOwnership(binding, expected) {
+	if (!expected) return;
+	const auth = binding?.connectionScope === "supervision" ? "native" : "host";
+	const hostModelChanged = expected.auth === "host" && (!expected.modelRef || binding?.model !== expected.modelRef.model || binding?.modelProvider !== expected.modelRef.provider);
+	if (binding?.preserveNativeModel !== true || auth !== expected.auth || hostModelChanged) throw new AgentHarnessPreflightError("Codex native session ownership is missing or changed. Reattach the original native session or create a new chat with a concrete model; no replacement thread was started.");
+}
+/** Requires the native model pair after a supervised pending branch has materialized. */
+function requireCodexSupervisionModelSelection(binding) {
+	const model = binding.model?.trim();
+	const modelProvider = binding.modelProvider?.trim();
+	if (binding.connectionScope !== "supervision" || !model || !modelProvider) throw new Error("Codex supervised binding is missing its native model and provider; refusing request selection");
+	return {
+		model,
+		modelProvider
+	};
+}
+/** Registration publishes the resolver; connection policy loads only for an actual request. */
+async function resolveCodexBindingAppServerConnection(params) {
+	return (await import("./binding-connection.runtime-CnRMC0ta.mjs")).resolveCodexBindingAppServerConnection(params, catalogHomes.tryGetRuntime());
+}
+//#endregion
+export { setCodexCatalogConnectionHomeResolver as a, resolveCodexBindingAppServerConnection as i, binding_connection_exports as n, requireCodexSupervisionModelSelection as r, assertCodexSessionRuntimeOwnership as t };